Seed and manage a SOC 2 CC3.1 risk register from Shasta scan findings.
npx skills add https://github.com/kkmookhey/shasta --skill risk-register-kkmookhey
Please help me install this Agent Skill. Skill: risk-register Source: https://github.com/kkmookhey/shasta/tree/main/.claude/skills/risk-register Command: npx skills add https://github.com/kkmookhey/shasta --skill risk-register-kkmookhey
SOC 2 CC3.1 compliance requires a living risk register that tracks control gaps, remediation actions, and audit evidence. This Skill helps founders create and maintain such a risk register by auto-seeding from cloud scans, tracking treatment, and exporting audit-ready reports.
Run the risk-register skill to seed the register from your most recent Shasta scan and begin assigning owners and treatments.
High-intent search queries and answers about installing and using this skill.
You can build a SOC 2 CC3.1 risk register by auto-seeding risks from your latest Shasta scan, which populates a structured register ready for tracking remediation and generating audit-grade compliance evidence.
Yes, you can assign owners, track statuses, and manage remediation treatments for each risk in the register, maintaining a living record that supports quarterly compliance reviews.
You generate audit-ready evidence by running the risk register to compile tracked control gaps, assigned ownership, and remediation statuses into structured reports designed for compliance reviews.
Yes, you need a Shasta configuration that provides a python_cmd and uses ShastaDB initialization to read your scan results and populate the risk items automatically.
The best way to automate risk management for SOC 2 is to seed your register directly from cloud scan outputs, automatically tracking control gaps and treatments to maintain continuous compliance.
kkmookheyGenerate Terraform-based fixes for cloud-compliance findings from Shasta scan data.
ethanolivertroyTrack compliance status across multiple frameworks and identify gaps.
judicialmindTrack regulatory obligations and filing deadlines across multiple jurisdictions.
adrianliechtiTrack compliance requirements and audit readiness across regulatory frameworks.
